Privacy Policy

1. Data We Collect

When you contact us through our website or otherwise, we may collect the following personal data: your name, email address, telephone number, the name of your organisation, and the content of your message or enquiry. We do not collect payment information directly — engagements are invoiced separately.

We also collect certain technical data through our website, including IP address, browser type, pages visited and time of visit. This data is collected through cookies and analytics tools and is described further in our Cookie Policy.

2. How We Use Your Data

We use the personal data you provide to respond to your enquiry, to conduct an advisory engagement if one is agreed, and to contact you with information that is directly relevant to your engagement. We do not send marketing communications without your consent.

The legal basis for processing your data is, where applicable: your consent (for enquiry form submissions), the performance of a contract (during an active engagement), and our legitimate interests in operating the practice professionally and securely.

We do not sell personal data to third parties. We may share data with service providers who assist us in operating the website (such as hosting providers) or who are engaged in the course of an engagement, where this is necessary and subject to appropriate confidentiality obligations.

3. Data Retention

Enquiry data is retained for twelve months from the date of receipt unless an engagement follows, in which case it is retained for the duration of the engagement and for five years thereafter for professional records purposes. You may request deletion of your data at any time, subject to our legal and professional obligations.

4. Data Protection Measures

Personal data is stored on secure servers with access controls. Communications containing sensitive information are handled through encrypted channels. We conduct periodic reviews of our data handling practices. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

Our website is hosted with providers who maintain appropriate security certifications. We do not store payment card information on our systems.

5. Cookies

Our website uses cookies for functionality and analytics purposes. Full details of the cookies we use and your options for managing them are set out in our Cookie Policy.

6. Your Rights

Under the Personal Data Protection Act 2010, you have the right to access personal data we hold about you, to correct inaccurate data, and to withdraw consent for processing where consent is the legal basis. Under GDPR (where applicable), you also have the right to erasure, portability, restriction of processing, and to object to processing based on legitimate interests.

To exercise any of these rights, please contact us at [email protected]. We will respond within thirty calendar days.

7. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies directly.

8. Children's Privacy

Our services are directed at business professionals and organisations. We do not knowingly collect personal data from individuals under the age of 18.

9. Changes to This Policy

We may update this policy from time to time. Where the changes are material, we will notify current clients directly. The date at the top of this page indicates when the policy was last reviewed.

10. Contact

For all privacy-related enquiries, including requests to exercise your rights:

If you are not satisfied with our response, you have the right to raise a complaint with the Personal Data Protection Commissioner of Malaysia or, if you are in the EU or UK, the relevant supervisory authority in your jurisdiction.